Am Freitag, 15. März 2013, 18:13:04 schrieb Chris Arnold:
> Trying to get multiple iOS devices connected to strongSwan 4.4.0 on SLES11.
> When trying from iPhone 5 with iOS6, i get vpn did not respond. Nothing
> appears in the charon logs either. I have verified the strongSwan public ip
> is correct. Here is my iOS section of ipsec.conf:
> 
> conn iOS
>       keyexchange=ikev1
>       authby=xauthpsk
>       xauth=server
>       left=%defaultroute
>       leftsubnet=192.168.1.0/24
>       right=%any
>       rightsourceip=192.168.3.0/24
>       pfs=no
>       auto=add
> 
> ipsec.secrets:
> : PSK "my psk"
> 
> I am following this advise:
> http://wiki.strongswan.org/projects/strongswan/wiki/IOS_%28Apple%29
> 
> Can someone help with this?

>I have the same problem, and upgraded to strongswan 5.0.2 because of that, but 
>it didn't help either. My thread is "wiki article iOS". Let's see if we can 
>solve that.


charon log shows:
11[CFG] received stroke: initiate 'iOS'
11[CFG] ignoring initiation request for IKEv1 config

ipsec statusall
000 Status of IKEv1 pluto daemon (strongSwan 4.4.0):
000 interface lo/lo 127.0.0.1:4500
000 interface lo/lo 127.0.0.1:500
000 interface lo/lo 127.0.0.2:4500
000 interface lo/lo 127.0.0.2:500
000 interface eth0/eth0 192.168.1.18:4500
000 interface eth0/eth0 192.168.1.18:500
000 %myid = '%any'
000 loaded plugins: curl ldap aes des sha1 sha2 md5 random x509 pubkey pkcs1 
pgp dnskey pem openssl gcrypt hmac gmp attr
000 debug options: none
000 Virtual IP pools (size/online/offline):
000 "iOS": 255/0/0
000
000 "iOS": 
192.168.1.0/24===192.168.1.18[192.168.1.18]---192.168.1.1...%any[%any]===%iOS; 
unrouted; eroute owner: #0
000 "iOS":   ike_life: 28800s; ipsec_life: 1200s; rekey_margin: 180s; 
rekey_fuzz: 100%; keyingtries: 1
000 "iOS":   policy: ENCRYPT+TUNNEL+XAUTHPSK+XAUTHSERVER; prio: 24,32; 
interface: eth0;
000 "iOS":   newest ISAKMP SA: #0; newest IPsec SA: #0;
000

Does this look right?

_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to